Scraping The Internet for Malicious Javascript

Story

It’s a saturday night boredom is reining I read a blog post here about websites running crypto-currency mining script on visitors computers decided to see how much of the internet is doing this .

Scraping,Concurrency and Other Things 9:30 PM

I wrote a quick package it’s on Github ,the script is very simple it leverages Go concurrency for speed and parse the HTML looking for script tags parses their respective src and compares it to the magical cdn link of coinhive .

const MAGIC = "https://coinhive.com/lib/coinhive.min.js"

Conclusion

Happy Research